Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: +M3qrApQ3ow7MOdnhlwCIX9VSUwZYwYq0Z0f4+7UQ58=
Subject key identifier: 75:D3:DE:B4:AC:6A:F8:22:F5:0B:43:EC:EC:26:B5:31:48:E6:6D:82
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 01991DD3E96F2B15DA66C2CCB7F9D5344162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 118E
Signing time: Sat 06 Sep 2025 07:00:51 +0000
Manifest this update: Sat 06 Sep 2025 07:00:51 +0000
Manifest next update: Sun 07 Sep 2025 07:00:51 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: mbsUMiw2+KN2EB2mvCMd66GMjh9G3MXfg86GVm8+M54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d3:e9:6f:2b:15:da:66:c2:cc:b7:f9:d5:34:41:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Sep 6 07:00:51 2025 GMT
Not After : Sep 7 07:00:51 2025 GMT
Subject: CN=75d3deb4ac6af822f50b43ecec26b53148e66d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:6b:a9:12:b5:a9:86:28:4c:70:53:65:5a:
44:f2:ea:c2:37:84:9c:10:fe:d5:09:aa:d0:89:f9:
58:de:a8:37:98:82:14:2f:7a:ff:d9:8d:35:78:af:
33:a8:6b:02:df:aa:a8:28:87:98:67:17:19:f8:6e:
3a:d9:b5:c0:ec:01:70:58:4b:7b:81:de:0d:9c:32:
bf:ee:9a:be:9f:91:c4:fe:e0:6c:58:cf:31:3d:4a:
b4:cd:a6:b1:56:a4:4a:08:e5:2c:79:7f:de:5d:89:
e4:66:a6:45:e3:13:6c:e4:ec:26:07:b8:e2:e9:f9:
25:b9:93:06:63:a9:e0:93:31:93:27:65:23:e9:ad:
58:df:ee:7b:91:8d:72:4a:4a:6b:dd:bc:dd:24:da:
9b:e4:f0:ca:25:87:b6:fa:2b:24:40:c5:4d:15:c1:
9d:fe:87:2d:66:2a:0a:8f:36:cd:eb:9a:4f:41:3a:
6f:57:b4:fa:9c:71:42:5d:ad:a4:48:99:50:eb:03:
5b:3c:e4:7a:4b:e9:1c:89:c0:c5:74:6f:b1:4c:23:
a0:5f:a7:3d:4f:bd:97:39:6a:79:59:23:66:2d:d7:
b4:ef:4f:90:08:84:68:d6:23:92:53:d2:b4:82:69:
a4:bc:33:47:25:56:81:a2:aa:62:23:ce:4b:ee:52:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D3:DE:B4:AC:6A:F8:22:F5:0B:43:EC:EC:26:B5:31:48:E6:6D:82
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:49:83:75:fa:f6:51:a5:1e:8e:44:97:35:85:59:33:a0:ee:
78:88:e4:37:78:44:04:a6:07:72:b3:b6:1c:8b:26:a0:7c:0f:
a1:11:3d:d1:d7:31:39:08:38:1e:e7:e3:24:74:ad:01:67:06:
04:4a:fe:cc:7e:c7:a2:84:82:5e:bb:df:e7:1f:7f:18:39:95:
d4:45:7a:8f:1b:d8:6c:a5:9c:4c:dd:48:70:fa:ba:70:3a:fd:
2d:1b:d6:c0:cc:5d:6a:80:37:b2:25:af:68:0e:92:3e:0f:ac:
cf:45:46:9d:74:7c:52:31:0a:e8:36:c2:7b:62:64:96:19:fe:
87:51:ff:7b:e1:ff:5b:d1:42:aa:1d:e1:fe:4d:f2:de:3f:77:
e3:fd:0e:b0:f5:d5:11:8d:bb:d7:a0:69:db:df:99:96:7c:ee:
9a:50:b3:44:66:ea:a1:a8:a0:35:f6:f4:fa:55:51:86:14:4c:
89:34:06:1d:21:44:f1:89:97:a0:dd:b3:5a:5a:e5:0c:7d:e1:
a8:b9:c9:41:7d:f1:c6:d8:a2:f7:9a:f0:09:09:37:21:fb:55:
ca:5b:c2:94:18:4e:17:9d:df:ee:dd:9c:11:6e:88:e1:47:b4:
ab:cb:f4:21:92:58:c9:82:43:65:f2:aa:90:a7:3b:d7:2d:51:
f6:b6:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:14:19 2025 by rpki-client